
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
File: sh-7koheKG95wUMeEHecbxfbntc.mft (raw, json)
Hash identifier: YFWam5YQ++nsJXnkpj5D23Um7IpAgflhjRZ331WTAAA=
Subject key identifier: 2A:CB:F5:F2:F2:F5:12:EB:C5:80:C0:B7:84:F2:23:E5:FF:FC:5F:EA
Authority key identifier: B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7
Certificate issuer: /CN=A9114747/serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
Manifest number: 28
Signing time: Mon 19 Oct 2026 09:35:53 +0000
Manifest this update: Mon 19 Oct 2026 09:35:52 +0000
Manifest next update: Mon 26 Oct 2026 09:35:52 +0000
Files and hashes: 1: sh-7koheKG95wUMeEHecbxfbntc.crl (hash: VsSIA8z7vado+8rv3rxy9SSxW56HDFZ2ed2i/pZtA/0=)
2: E855FB7A980111F1937686323211F970.roa (hash: 6NC9VsA0PjYcqqS7+rb/opvcfAVHW6RSMyp3OIjHA6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl
rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114747, serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7
Validity
Not Before: Oct 19 09:35:52 2026 GMT
Not After : Oct 26 09:35:52 2026 GMT
Subject: CN=6ad5e479-c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:75:a5:8f:fd:6a:1b:7c:ab:61:4b:af:7e:
0d:8b:b3:60:9b:d8:60:c3:fe:6c:d1:75:15:18:10:
c6:29:61:db:04:95:67:9b:26:cd:d1:51:a2:7c:ef:
b2:33:36:0b:fb:d6:a8:ef:41:01:2a:bf:b0:0d:d7:
35:85:64:cb:08:e4:ba:3c:d3:52:3b:5d:9d:b8:06:
38:de:fc:a9:5b:29:f5:85:be:d5:e8:a1:b4:6c:e8:
79:e5:f3:9f:cf:1d:a5:46:fc:e6:f2:45:92:30:a3:
67:ec:1d:dd:e4:e1:3a:e0:09:d7:0f:1a:01:37:b4:
31:dd:6e:28:c6:20:ea:4b:4d:8f:37:21:cd:b0:01:
88:03:5b:58:98:86:6b:34:f1:95:90:60:44:0f:5c:
65:6d:a9:22:56:77:8c:c0:18:19:48:e9:e4:c3:18:
be:4f:6e:f3:d4:97:98:5f:07:44:86:5b:1b:50:6d:
4d:02:81:c5:44:7f:1d:ef:42:0a:d7:78:9f:98:29:
f2:c7:d9:c8:4a:ff:6c:6b:7e:ff:7c:44:10:38:e7:
51:70:5f:84:ba:cb:7d:3a:e2:ae:7b:be:15:ce:b3:
cf:c1:ad:3d:a3:e8:33:15:e3:ff:75:78:aa:d9:42:
6f:76:ce:a9:11:fe:4d:a9:c3:b1:11:52:39:aa:e4:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:F5:F2:F2:F5:12:EB:C5:80:C0:B7:84:F2:23:E5:FF:FC:5F:EA
X509v3 Authority Key Identifier:
keyid:B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:4f:ca:26:d9:8c:08:76:c5:05:f8:0f:8b:07:94:bb:47:
f2:fa:f4:fc:7a:67:1a:d4:11:ce:d4:de:39:c3:ca:e1:07:fe:
14:7a:7d:d8:7d:62:bd:cf:e2:30:37:ca:93:53:c5:cf:1e:b6:
c8:5e:86:4c:48:ae:64:d4:eb:e0:4e:fb:4f:2e:89:06:85:1f:
20:32:79:6c:80:f1:8a:15:c9:bf:4d:51:6a:3f:7e:63:6a:9b:
a8:80:0d:c0:68:b7:ad:4e:84:e6:cf:a5:ca:0a:b9:e4:c7:ec:
92:37:8d:a7:c6:68:8f:8a:7a:18:8d:4c:2e:34:88:bb:6c:a5:
2f:0f:3a:26:b5:2f:8b:a9:2b:61:23:2b:16:0a:07:7d:cb:2c:
7d:45:33:4e:bc:0f:75:52:aa:a0:f3:49:00:b7:05:99:45:48:
f9:d2:4d:28:5a:29:17:11:a3:3c:67:06:79:a8:11:e6:3a:17:
27:46:a5:18:0e:ff:18:38:66:e6:82:6a:1b:c5:45:59:cd:06:
cd:87:cd:45:5b:75:ab:0f:1d:fc:bd:4b:58:21:89:f0:54:66:
59:dc:5f:7a:6a:ea:f5:d3:53:37:7b:3d:ba:f0:fa:b7:cf:9d:
52:8b:bd:c7:ad:b4:13:7c:04:64:2f:2d:0a:d6:44:84:4a:98:
a8:06:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:04:28 2026 by rpki-client